aws-cdk-lib 2.125.0__py3-none-any.whl → 2.127.0__py3-none-any.whl

aws_cdk/aws_ecs_patterns/__init__.py

@@ -62,6 +62,8 @@ You can omit `cluster` and `vpc` to let CDK create a new VPC with two AZs and cr
 
 You can customize the health check for your target group; otherwise it defaults to `HTTP` over port `80` hitting path `/`.
 
+You can customize the health check configuration of the container via the [`healthCheck`](https://docs.aws.amazon.com/cdk/api/v2/docs/aws-cdk-lib.aws_ecs.HealthCheck.html) property; otherwise it defaults to the health check configuration from the container.
+
 Fargate services will use the `LATEST` platform version by default, but you can override by providing a value for the `platformVersion` property in the constructor.
 
 Fargate services use the default VPC Security Group unless one or more are provided using the `securityGroups` property in the constructor.
@@ -8067,6 +8069,7 @@ class ApplicationLoadBalancedFargateService(
         id: builtins.str,
         *,
         assign_public_ip: typing.Optional[builtins.bool] = None,
+        health_check: typing.Optional[typing.Union[_HealthCheck_6459d04f, typing.Dict[builtins.str, typing.Any]]] = None,
         security_groups: typing.Optional[typing.Sequence[_ISecurityGroup_acf8a799]] = None,
         task_subnets: typing.Optional[typing.Union[_SubnetSelection_e57d76df, typing.Dict[builtins.str, typing.Any]]] = None,
         capacity_provider_strategies: typing.Optional[typing.Sequence[typing.Union[_CapacityProviderStrategy_8d7b6657, typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -8110,6 +8113,7 @@ class ApplicationLoadBalancedFargateService(
         :param scope: -
         :param id: -
         :param assign_public_ip: Determines whether the service will be assigned a public IP address. Default: false
+        :param health_check: The health check command and associated configuration parameters for the container. Default: - Health check configuration from container.
         :param security_groups: The security groups to associate with the service. If you do not specify a security group, a new security group is created. Default: - A new security group is created.
         :param task_subnets: The subnets to associate with the service. Default: - Public subnets if ``assignPublicIp`` is set, otherwise the first available one of Private, Isolated, Public, in that order.
         :param capacity_provider_strategies: A list of Capacity Provider strategies used to place a service. Default: - undefined
@@ -8154,6 +8158,7 @@ class ApplicationLoadBalancedFargateService(
             check_type(argname="argument id", value=id, expected_type=type_hints["id"])
         props = ApplicationLoadBalancedFargateServiceProps(
             assign_public_ip=assign_public_ip,
+            health_check=health_check,
             security_groups=security_groups,
             task_subnets=task_subnets,
             capacity_provider_strategies=capacity_provider_strategies,
@@ -8256,6 +8261,7 @@ class ApplicationLoadBalancedFargateService(
         "runtime_platform": "runtimePlatform",
         "task_definition": "taskDefinition",
         "assign_public_ip": "assignPublicIp",
+        "health_check": "healthCheck",
         "security_groups": "securityGroups",
         "task_subnets": "taskSubnets",
     },
@@ -8303,6 +8309,7 @@ class ApplicationLoadBalancedFargateServiceProps(
         runtime_platform: typing.Optional[typing.Union[_RuntimePlatform_5ed98a9c, typing.Dict[builtins.str, typing.Any]]] = None,
         task_definition: typing.Optional[_FargateTaskDefinition_83754b60] = None,
         assign_public_ip: typing.Optional[builtins.bool] = None,
+        health_check: typing.Optional[typing.Union[_HealthCheck_6459d04f, typing.Dict[builtins.str, typing.Any]]] = None,
         security_groups: typing.Optional[typing.Sequence[_ISecurityGroup_acf8a799]] = None,
         task_subnets: typing.Optional[typing.Union[_SubnetSelection_e57d76df, typing.Dict[builtins.str, typing.Any]]] = None,
     ) -> None:
@@ -8344,6 +8351,7 @@ class ApplicationLoadBalancedFargateServiceProps(
         :param runtime_platform: The runtime platform of the task definition. Default: - If the property is undefined, ``operatingSystemFamily`` is LINUX and ``cpuArchitecture`` is X86_64
         :param task_definition: The task definition to use for tasks in the service. TaskDefinition or TaskImageOptions must be specified, but not both. [disable-awslint:ref-via-interface] Default: - none
         :param assign_public_ip: Determines whether the service will be assigned a public IP address. Default: false
+        :param health_check: The health check command and associated configuration parameters for the container. Default: - Health check configuration from container.
         :param security_groups: The security groups to associate with the service. If you do not specify a security group, a new security group is created. Default: - A new security group is created.
         :param task_subnets: The subnets to associate with the service. Default: - Public subnets if ``assignPublicIp`` is set, otherwise the first available one of Private, Isolated, Public, in that order.
 
@@ -8377,6 +8385,8 @@ class ApplicationLoadBalancedFargateServiceProps(
             task_image_options = ApplicationLoadBalancedTaskImageOptions(**task_image_options)
         if isinstance(runtime_platform, dict):
             runtime_platform = _RuntimePlatform_5ed98a9c(**runtime_platform)
+        if isinstance(health_check, dict):
+            health_check = _HealthCheck_6459d04f(**health_check)
         if isinstance(task_subnets, dict):
             task_subnets = _SubnetSelection_e57d76df(**task_subnets)
         if __debug__:
@@ -8417,6 +8427,7 @@ class ApplicationLoadBalancedFargateServiceProps(
             check_type(argname="argument runtime_platform", value=runtime_platform, expected_type=type_hints["runtime_platform"])
             check_type(argname="argument task_definition", value=task_definition, expected_type=type_hints["task_definition"])
             check_type(argname="argument assign_public_ip", value=assign_public_ip, expected_type=type_hints["assign_public_ip"])
+            check_type(argname="argument health_check", value=health_check, expected_type=type_hints["health_check"])
             check_type(argname="argument security_groups", value=security_groups, expected_type=type_hints["security_groups"])
             check_type(argname="argument task_subnets", value=task_subnets, expected_type=type_hints["task_subnets"])
         self._values: typing.Dict[builtins.str, typing.Any] = {}
@@ -8492,6 +8503,8 @@ class ApplicationLoadBalancedFargateServiceProps(
             self._values["task_definition"] = task_definition
         if assign_public_ip is not None:
             self._values["assign_public_ip"] = assign_public_ip
+        if health_check is not None:
+            self._values["health_check"] = health_check
         if security_groups is not None:
             self._values["security_groups"] = security_groups
         if task_subnets is not None:
@@ -8920,6 +8933,15 @@ class ApplicationLoadBalancedFargateServiceProps(
         result = self._values.get("assign_public_ip")
         return typing.cast(typing.Optional[builtins.bool], result)
 
+    @builtins.property
+    def health_check(self) -> typing.Optional[_HealthCheck_6459d04f]:
+        '''The health check command and associated configuration parameters for the container.
+
+        :default: - Health check configuration from container.
+        '''
+        result = self._values.get("health_check")
+        return typing.cast(typing.Optional[_HealthCheck_6459d04f], result)
+
     @builtins.property
     def security_groups(self) -> typing.Optional[typing.List[_ISecurityGroup_acf8a799]]:
         '''The security groups to associate with the service.
@@ -16377,6 +16399,7 @@ def _typecheckingstub__52e4707f036e6b5ab8a12a1dd88ad78656d9ef102eb7d04caef957d69
     id: builtins.str,
     *,
     assign_public_ip: typing.Optional[builtins.bool] = None,
+    health_check: typing.Optional[typing.Union[_HealthCheck_6459d04f, typing.Dict[builtins.str, typing.Any]]] = None,
     security_groups: typing.Optional[typing.Sequence[_ISecurityGroup_acf8a799]] = None,
     task_subnets: typing.Optional[typing.Union[_SubnetSelection_e57d76df, typing.Dict[builtins.str, typing.Any]]] = None,
     capacity_provider_strategies: typing.Optional[typing.Sequence[typing.Union[_CapacityProviderStrategy_8d7b6657, typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -16456,6 +16479,7 @@ def _typecheckingstub__cdcb8bd483faaddad588ad37d4527fa1a0028fc2307a21fc3690044a0
     runtime_platform: typing.Optional[typing.Union[_RuntimePlatform_5ed98a9c, typing.Dict[builtins.str, typing.Any]]] = None,
     task_definition: typing.Optional[_FargateTaskDefinition_83754b60] = None,
     assign_public_ip: typing.Optional[builtins.bool] = None,
+    health_check: typing.Optional[typing.Union[_HealthCheck_6459d04f, typing.Dict[builtins.str, typing.Any]]] = None,
     security_groups: typing.Optional[typing.Sequence[_ISecurityGroup_acf8a799]] = None,
     task_subnets: typing.Optional[typing.Union[_SubnetSelection_e57d76df, typing.Dict[builtins.str, typing.Any]]] = None,
 ) -> None:

aws_cdk/aws_efs/__init__.py

@@ -27,7 +27,8 @@ file_system = efs.FileSystem(self, "MyEfsFileSystem",
     lifecycle_policy=efs.LifecyclePolicy.AFTER_14_DAYS,  # files are not transitioned to infrequent access (IA) storage by default
     performance_mode=efs.PerformanceMode.GENERAL_PURPOSE,  # default
     out_of_infrequent_access_policy=efs.OutOfInfrequentAccessPolicy.AFTER_1_ACCESS,  # files are not transitioned back from (infrequent access) IA to primary storage by default
-    transition_to_archive_policy=efs.LifecyclePolicy.AFTER_14_DAYS
+    transition_to_archive_policy=efs.LifecyclePolicy.AFTER_14_DAYS,  # files are not transitioned to Archive by default
+    replication_overwrite_protection=efs.ReplicationOverwriteProtection.ENABLED
 )
 ```
 
@@ -1554,7 +1555,7 @@ class CfnFileSystem(
         :param file_system_tags: Use to create one or more tags associated with the file system. Each tag is a user-defined key-value pair. Name your file system on creation by including a ``"Key":"Name","Value":"{value}"`` key-value pair. Each key must be unique. For more information, see `Tagging AWS resources <https://docs.aws.amazon.com/general/latest/gr/aws_tagging.html>`_ in the *AWS General Reference Guide* .
         :param kms_key_id: The ID of the AWS KMS key to be used to protect the encrypted file system. This parameter is only required if you want to use a nondefault KMS key . If this parameter is not specified, the default KMS key for Amazon EFS is used. This ID can be in one of the following formats: - Key ID - A unique identifier of the key, for example ``1234abcd-12ab-34cd-56ef-1234567890ab`` . - ARN - An Amazon Resource Name (ARN) for the key, for example ``arn:aws:kms:us-west-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab`` . - Key alias - A previously created display name for a key, for example ``alias/projectKey1`` . - Key alias ARN - An ARN for a key alias, for example ``arn:aws:kms:us-west-2:444455556666:alias/projectKey1`` . If ``KmsKeyId`` is specified, the ``Encrypted`` parameter must be set to true.
         :param lifecycle_policies: An array of ``LifecyclePolicy`` objects that define the file system's ``LifecycleConfiguration`` object. A ``LifecycleConfiguration`` object informs Lifecycle management of the following: - When to move files in the file system from primary storage to IA storage. - When to move files in the file system from primary storage or IA storage to Archive storage. - When to move files that are in IA or Archive storage to primary storage. .. epigraph:: Amazon EFS requires that each ``LifecyclePolicy`` object have only a single transition. This means that in a request body, ``LifecyclePolicies`` needs to be structured as an array of ``LifecyclePolicy`` objects, one object for each transition, ``TransitionToIA`` , ``TransitionToArchive`` ``TransitionToPrimaryStorageClass`` . See the example requests in the following section for more information.
-        :param performance_mode: The Performance mode of the file system. We recommend ``generalPurpose`` performance mode for all file systems. File systems using the ``maxIO`` performance mode can scale to higher levels of aggregate throughput and operations per second with a tradeoff of slightly higher latencies for most file operations. The performance mode can't be changed after the file system has been created. The ``maxIO`` mode is not supported on One Zone file systems. .. epigraph:: Due to the higher per-operation latencies with Max I/O, we recommend using General Purpose performance mode for all file systems. Default is ``generalPurpose`` .
+        :param performance_mode: The performance mode of the file system. We recommend ``generalPurpose`` performance mode for all file systems. File systems using the ``maxIO`` performance mode can scale to higher levels of aggregate throughput and operations per second with a tradeoff of slightly higher latencies for most file operations. The performance mode can't be changed after the file system has been created. The ``maxIO`` mode is not supported on One Zone file systems. .. epigraph:: Due to the higher per-operation latencies with Max I/O, we recommend using General Purpose performance mode for all file systems. Default is ``generalPurpose`` .
         :param provisioned_throughput_in_mibps: The throughput, measured in mebibytes per second (MiBps), that you want to provision for a file system that you're creating. Required if ``ThroughputMode`` is set to ``provisioned`` . Valid values are 1-3414 MiBps, with the upper limit depending on Region. To increase this limit, contact AWS Support . For more information, see `Amazon EFS quotas that you can increase <https://docs.aws.amazon.com/efs/latest/ug/limits.html#soft-limits>`_ in the *Amazon EFS User Guide* .
         :param replication_configuration: Describes the replication configuration for a specific file system.
         :param throughput_mode: Specifies the throughput mode for the file system. The mode can be ``bursting`` , ``provisioned`` , or ``elastic`` . If you set ``ThroughputMode`` to ``provisioned`` , you must also set a value for ``ProvisionedThroughputInMibps`` . After you create the file system, you can decrease your file system's Provisioned throughput or change between the throughput modes, with certain time restrictions. For more information, see `Specifying throughput with provisioned mode <https://docs.aws.amazon.com/efs/latest/ug/performance.html#provisioned-throughput>`_ in the *Amazon EFS User Guide* . Default is ``bursting`` .
@@ -1794,7 +1795,7 @@ class CfnFileSystem(
     @builtins.property
     @jsii.member(jsii_name="performanceMode")
     def performance_mode(self) -> typing.Optional[builtins.str]:
-        '''The Performance mode of the file system.'''
+        '''The performance mode of the file system.'''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "performanceMode"))
 
     @performance_mode.setter
@@ -2367,7 +2368,7 @@ class CfnFileSystemProps:
         :param file_system_tags: Use to create one or more tags associated with the file system. Each tag is a user-defined key-value pair. Name your file system on creation by including a ``"Key":"Name","Value":"{value}"`` key-value pair. Each key must be unique. For more information, see `Tagging AWS resources <https://docs.aws.amazon.com/general/latest/gr/aws_tagging.html>`_ in the *AWS General Reference Guide* .
         :param kms_key_id: The ID of the AWS KMS key to be used to protect the encrypted file system. This parameter is only required if you want to use a nondefault KMS key . If this parameter is not specified, the default KMS key for Amazon EFS is used. This ID can be in one of the following formats: - Key ID - A unique identifier of the key, for example ``1234abcd-12ab-34cd-56ef-1234567890ab`` . - ARN - An Amazon Resource Name (ARN) for the key, for example ``arn:aws:kms:us-west-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab`` . - Key alias - A previously created display name for a key, for example ``alias/projectKey1`` . - Key alias ARN - An ARN for a key alias, for example ``arn:aws:kms:us-west-2:444455556666:alias/projectKey1`` . If ``KmsKeyId`` is specified, the ``Encrypted`` parameter must be set to true.
         :param lifecycle_policies: An array of ``LifecyclePolicy`` objects that define the file system's ``LifecycleConfiguration`` object. A ``LifecycleConfiguration`` object informs Lifecycle management of the following: - When to move files in the file system from primary storage to IA storage. - When to move files in the file system from primary storage or IA storage to Archive storage. - When to move files that are in IA or Archive storage to primary storage. .. epigraph:: Amazon EFS requires that each ``LifecyclePolicy`` object have only a single transition. This means that in a request body, ``LifecyclePolicies`` needs to be structured as an array of ``LifecyclePolicy`` objects, one object for each transition, ``TransitionToIA`` , ``TransitionToArchive`` ``TransitionToPrimaryStorageClass`` . See the example requests in the following section for more information.
-        :param performance_mode: The Performance mode of the file system. We recommend ``generalPurpose`` performance mode for all file systems. File systems using the ``maxIO`` performance mode can scale to higher levels of aggregate throughput and operations per second with a tradeoff of slightly higher latencies for most file operations. The performance mode can't be changed after the file system has been created. The ``maxIO`` mode is not supported on One Zone file systems. .. epigraph:: Due to the higher per-operation latencies with Max I/O, we recommend using General Purpose performance mode for all file systems. Default is ``generalPurpose`` .
+        :param performance_mode: The performance mode of the file system. We recommend ``generalPurpose`` performance mode for all file systems. File systems using the ``maxIO`` performance mode can scale to higher levels of aggregate throughput and operations per second with a tradeoff of slightly higher latencies for most file operations. The performance mode can't be changed after the file system has been created. The ``maxIO`` mode is not supported on One Zone file systems. .. epigraph:: Due to the higher per-operation latencies with Max I/O, we recommend using General Purpose performance mode for all file systems. Default is ``generalPurpose`` .
         :param provisioned_throughput_in_mibps: The throughput, measured in mebibytes per second (MiBps), that you want to provision for a file system that you're creating. Required if ``ThroughputMode`` is set to ``provisioned`` . Valid values are 1-3414 MiBps, with the upper limit depending on Region. To increase this limit, contact AWS Support . For more information, see `Amazon EFS quotas that you can increase <https://docs.aws.amazon.com/efs/latest/ug/limits.html#soft-limits>`_ in the *Amazon EFS User Guide* .
         :param replication_configuration: Describes the replication configuration for a specific file system.
         :param throughput_mode: Specifies the throughput mode for the file system. The mode can be ``bursting`` , ``provisioned`` , or ``elastic`` . If you set ``ThroughputMode`` to ``provisioned`` , you must also set a value for ``ProvisionedThroughputInMibps`` . After you create the file system, you can decrease your file system's Provisioned throughput or change between the throughput modes, with certain time restrictions. For more information, see `Specifying throughput with provisioned mode <https://docs.aws.amazon.com/efs/latest/ug/performance.html#provisioned-throughput>`_ in the *Amazon EFS User Guide* . Default is ``bursting`` .
@@ -2587,7 +2588,7 @@ class CfnFileSystemProps:
 
     @builtins.property
     def performance_mode(self) -> typing.Optional[builtins.str]:
-        '''The Performance mode of the file system.
+        '''The performance mode of the file system.
 
         We recommend ``generalPurpose`` performance mode for all file systems. File systems using the ``maxIO`` performance mode can scale to higher levels of aggregate throughput and operations per second with a tradeoff of slightly higher latencies for most file operations. The performance mode can't be changed after the file system has been created. The ``maxIO`` mode is not supported on One Zone file systems.
         .. epigraph::
@@ -3036,6 +3037,7 @@ class FileSystemAttributes:
         "performance_mode": "performanceMode",
         "provisioned_throughput_per_second": "provisionedThroughputPerSecond",
         "removal_policy": "removalPolicy",
+        "replication_overwrite_protection": "replicationOverwriteProtection",
         "security_group": "securityGroup",
         "throughput_mode": "throughputMode",
         "transition_to_archive_policy": "transitionToArchivePolicy",
@@ -3059,6 +3061,7 @@ class FileSystemProps:
         performance_mode: typing.Optional["PerformanceMode"] = None,
         provisioned_throughput_per_second: typing.Optional[_Size_7b441c34] = None,
         removal_policy: typing.Optional[_RemovalPolicy_9f93c814] = None,
+        replication_overwrite_protection: typing.Optional["ReplicationOverwriteProtection"] = None,
         security_group: typing.Optional[_ISecurityGroup_acf8a799] = None,
         throughput_mode: typing.Optional["ThroughputMode"] = None,
         transition_to_archive_policy: typing.Optional["LifecyclePolicy"] = None,
@@ -3079,6 +3082,7 @@ class FileSystemProps:
         :param performance_mode: The performance mode that the file system will operate under. An Amazon EFS file system's performance mode can't be changed after the file system has been created. Updating this property will replace the file system. Default: PerformanceMode.GENERAL_PURPOSE
         :param provisioned_throughput_per_second: Provisioned throughput for the file system. This is a required property if the throughput mode is set to PROVISIONED. Must be at least 1MiB/s. Default: - none, errors out
         :param removal_policy: The removal policy to apply to the file system. Default: RemovalPolicy.RETAIN
+        :param replication_overwrite_protection: Whether to enable the filesystem's replication overwrite protection or not. Set false if you want to create a read-only filesystem for use as a replication destination. Default: ReplicationOverwriteProtection.ENABLED
         :param security_group: Security Group to assign to this file system. Default: - creates new security group which allows all outbound traffic
         :param throughput_mode: Enum to mention the throughput mode of the file system. Default: ThroughputMode.BURSTING
         :param transition_to_archive_policy: The number of days after files were last accessed in primary storage (the Standard storage class) at which to move them to Archive storage. Metadata operations such as listing the contents of a directory don't count as file access events. Default: - None. EFS will not transition files to Archive storage class.
@@ -3118,6 +3122,7 @@ class FileSystemProps:
             check_type(argname="argument performance_mode", value=performance_mode, expected_type=type_hints["performance_mode"])
             check_type(argname="argument provisioned_throughput_per_second", value=provisioned_throughput_per_second, expected_type=type_hints["provisioned_throughput_per_second"])
             check_type(argname="argument removal_policy", value=removal_policy, expected_type=type_hints["removal_policy"])
+            check_type(argname="argument replication_overwrite_protection", value=replication_overwrite_protection, expected_type=type_hints["replication_overwrite_protection"])
             check_type(argname="argument security_group", value=security_group, expected_type=type_hints["security_group"])
             check_type(argname="argument throughput_mode", value=throughput_mode, expected_type=type_hints["throughput_mode"])
             check_type(argname="argument transition_to_archive_policy", value=transition_to_archive_policy, expected_type=type_hints["transition_to_archive_policy"])
@@ -3149,6 +3154,8 @@ class FileSystemProps:
             self._values["provisioned_throughput_per_second"] = provisioned_throughput_per_second
         if removal_policy is not None:
             self._values["removal_policy"] = removal_policy
+        if replication_overwrite_protection is not None:
+            self._values["replication_overwrite_protection"] = replication_overwrite_protection
         if security_group is not None:
             self._values["security_group"] = security_group
         if throughput_mode is not None:
@@ -3294,6 +3301,21 @@ class FileSystemProps:
         result = self._values.get("removal_policy")
         return typing.cast(typing.Optional[_RemovalPolicy_9f93c814], result)
 
+    @builtins.property
+    def replication_overwrite_protection(
+        self,
+    ) -> typing.Optional["ReplicationOverwriteProtection"]:
+        '''Whether to enable the filesystem's replication overwrite protection or not.
+
+        Set false if you want to create a read-only filesystem for use as a replication destination.
+
+        :default: ReplicationOverwriteProtection.ENABLED
+
+        :see: https://docs.aws.amazon.com/efs/latest/ug/replication-use-cases.html#replicate-existing-destination
+        '''
+        result = self._values.get("replication_overwrite_protection")
+        return typing.cast(typing.Optional["ReplicationOverwriteProtection"], result)
+
     @builtins.property
     def security_group(self) -> typing.Optional[_ISecurityGroup_acf8a799]:
         '''Security Group to assign to this file system.
@@ -3578,7 +3600,8 @@ class LifecyclePolicy(enum.Enum):
             lifecycle_policy=efs.LifecyclePolicy.AFTER_14_DAYS,  # files are not transitioned to infrequent access (IA) storage by default
             performance_mode=efs.PerformanceMode.GENERAL_PURPOSE,  # default
             out_of_infrequent_access_policy=efs.OutOfInfrequentAccessPolicy.AFTER_1_ACCESS,  # files are not transitioned back from (infrequent access) IA to primary storage by default
-            transition_to_archive_policy=efs.LifecyclePolicy.AFTER_14_DAYS
+            transition_to_archive_policy=efs.LifecyclePolicy.AFTER_14_DAYS,  # files are not transitioned to Archive by default
+            replication_overwrite_protection=efs.ReplicationOverwriteProtection.ENABLED
         )
     '''
 
@@ -3616,7 +3639,8 @@ class OutOfInfrequentAccessPolicy(enum.Enum):
             lifecycle_policy=efs.LifecyclePolicy.AFTER_14_DAYS,  # files are not transitioned to infrequent access (IA) storage by default
             performance_mode=efs.PerformanceMode.GENERAL_PURPOSE,  # default
             out_of_infrequent_access_policy=efs.OutOfInfrequentAccessPolicy.AFTER_1_ACCESS,  # files are not transitioned back from (infrequent access) IA to primary storage by default
-            transition_to_archive_policy=efs.LifecyclePolicy.AFTER_14_DAYS
+            transition_to_archive_policy=efs.LifecyclePolicy.AFTER_14_DAYS,  # files are not transitioned to Archive by default
+            replication_overwrite_protection=efs.ReplicationOverwriteProtection.ENABLED
         )
     '''
 
@@ -3638,7 +3662,8 @@ class PerformanceMode(enum.Enum):
             lifecycle_policy=efs.LifecyclePolicy.AFTER_14_DAYS,  # files are not transitioned to infrequent access (IA) storage by default
             performance_mode=efs.PerformanceMode.GENERAL_PURPOSE,  # default
             out_of_infrequent_access_policy=efs.OutOfInfrequentAccessPolicy.AFTER_1_ACCESS,  # files are not transitioned back from (infrequent access) IA to primary storage by default
-            transition_to_archive_policy=efs.LifecyclePolicy.AFTER_14_DAYS
+            transition_to_archive_policy=efs.LifecyclePolicy.AFTER_14_DAYS,  # files are not transitioned to Archive by default
+            replication_overwrite_protection=efs.ReplicationOverwriteProtection.ENABLED
         )
     '''
 
@@ -3763,6 +3788,31 @@ class PosixUser:
         )
 
 
+@jsii.enum(jsii_type="aws-cdk-lib.aws_efs.ReplicationOverwriteProtection")
+class ReplicationOverwriteProtection(enum.Enum):
+    '''The status of the file system's replication overwrite protection.
+
+    :see: https://docs.aws.amazon.com/ja_jp/AWSCloudFormation/latest/UserGuide/aws-properties-efs-filesystem-filesystemprotection.html
+    :exampleMetadata: infused
+
+    Example::
+
+        file_system = efs.FileSystem(self, "MyEfsFileSystem",
+            vpc=ec2.Vpc(self, "VPC"),
+            lifecycle_policy=efs.LifecyclePolicy.AFTER_14_DAYS,  # files are not transitioned to infrequent access (IA) storage by default
+            performance_mode=efs.PerformanceMode.GENERAL_PURPOSE,  # default
+            out_of_infrequent_access_policy=efs.OutOfInfrequentAccessPolicy.AFTER_1_ACCESS,  # files are not transitioned back from (infrequent access) IA to primary storage by default
+            transition_to_archive_policy=efs.LifecyclePolicy.AFTER_14_DAYS,  # files are not transitioned to Archive by default
+            replication_overwrite_protection=efs.ReplicationOverwriteProtection.ENABLED
+        )
+    '''
+
+    ENABLED = "ENABLED"
+    '''Enable the filesystem's replication overwrite protection.'''
+    DISABLED = "DISABLED"
+    '''Disable the filesystem's replication overwrite protection.'''
+
+
 @jsii.enum(jsii_type="aws-cdk-lib.aws_efs.ThroughputMode")
 class ThroughputMode(enum.Enum):
     '''EFS Throughput mode.
@@ -3957,6 +4007,7 @@ class FileSystem(
         performance_mode: typing.Optional[PerformanceMode] = None,
         provisioned_throughput_per_second: typing.Optional[_Size_7b441c34] = None,
         removal_policy: typing.Optional[_RemovalPolicy_9f93c814] = None,
+        replication_overwrite_protection: typing.Optional[ReplicationOverwriteProtection] = None,
         security_group: typing.Optional[_ISecurityGroup_acf8a799] = None,
         throughput_mode: typing.Optional[ThroughputMode] = None,
         transition_to_archive_policy: typing.Optional[LifecyclePolicy] = None,
@@ -3979,6 +4030,7 @@ class FileSystem(
         :param performance_mode: The performance mode that the file system will operate under. An Amazon EFS file system's performance mode can't be changed after the file system has been created. Updating this property will replace the file system. Default: PerformanceMode.GENERAL_PURPOSE
         :param provisioned_throughput_per_second: Provisioned throughput for the file system. This is a required property if the throughput mode is set to PROVISIONED. Must be at least 1MiB/s. Default: - none, errors out
         :param removal_policy: The removal policy to apply to the file system. Default: RemovalPolicy.RETAIN
+        :param replication_overwrite_protection: Whether to enable the filesystem's replication overwrite protection or not. Set false if you want to create a read-only filesystem for use as a replication destination. Default: ReplicationOverwriteProtection.ENABLED
         :param security_group: Security Group to assign to this file system. Default: - creates new security group which allows all outbound traffic
         :param throughput_mode: Enum to mention the throughput mode of the file system. Default: ThroughputMode.BURSTING
         :param transition_to_archive_policy: The number of days after files were last accessed in primary storage (the Standard storage class) at which to move them to Archive storage. Metadata operations such as listing the contents of a directory don't count as file access events. Default: - None. EFS will not transition files to Archive storage class.
@@ -4002,6 +4054,7 @@ class FileSystem(
             performance_mode=performance_mode,
             provisioned_throughput_per_second=provisioned_throughput_per_second,
             removal_policy=removal_policy,
+            replication_overwrite_protection=replication_overwrite_protection,
             security_group=security_group,
             throughput_mode=throughput_mode,
             transition_to_archive_policy=transition_to_archive_policy,
@@ -4192,6 +4245,7 @@ __all__ = [
     "OutOfInfrequentAccessPolicy",
     "PerformanceMode",
     "PosixUser",
+    "ReplicationOverwriteProtection",
     "ThroughputMode",
 ]
 
@@ -4594,6 +4648,7 @@ def _typecheckingstub__a11d59607a7c01a190b2b0587733658cfcb8eddfb252f3c48abdc988b
     performance_mode: typing.Optional[PerformanceMode] = None,
     provisioned_throughput_per_second: typing.Optional[_Size_7b441c34] = None,
     removal_policy: typing.Optional[_RemovalPolicy_9f93c814] = None,
+    replication_overwrite_protection: typing.Optional[ReplicationOverwriteProtection] = None,
     security_group: typing.Optional[_ISecurityGroup_acf8a799] = None,
     throughput_mode: typing.Optional[ThroughputMode] = None,
     transition_to_archive_policy: typing.Optional[LifecyclePolicy] = None,
@@ -4684,6 +4739,7 @@ def _typecheckingstub__fe7547e76a3f3502ef6c67d1cc851b25d13fe1b4b980d3bccee8eae2f
     performance_mode: typing.Optional[PerformanceMode] = None,
     provisioned_throughput_per_second: typing.Optional[_Size_7b441c34] = None,
     removal_policy: typing.Optional[_RemovalPolicy_9f93c814] = None,
+    replication_overwrite_protection: typing.Optional[ReplicationOverwriteProtection] = None,
     security_group: typing.Optional[_ISecurityGroup_acf8a799] = None,
     throughput_mode: typing.Optional[ThroughputMode] = None,
     transition_to_archive_policy: typing.Optional[LifecyclePolicy] = None,